CVE-2025-63739

n/a / n/a PUBLISHED

Description (CNA)

An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modify PHP configuration files via the a parameter to the index.php endpoint.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/rainrocka/xinhu/issues/12

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.